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j (57) Abstract: An architecture for managing alerts and notifications is disclosed. In one embodiment, a computerized system 
. includes three modules, an attentional status module, a peripheral information notification and alerts module, and a notification de- 
J cision-making module. The attentional-status module generates a probability distribution over the user's focus of attention. The 

peripheral information notification and alerts module receives alerts from different sources, including the operating system, standard 
) applications, and special plug-ins designed to work with the architecture. The notification decision-making module is to alert the 
- user of the alerts received by the peripheral information notification and alerts module, based on the probability generated by the 

attentional status module. 
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ARCHITECTURE FOR MANAGING ALERTS 



TECHNICAL FIELD 

This invention relates generally to alerts received or generated by devices such as 
5 computers, and more particularly to an architecture for managing such alerts. 

BACKGROUND ART 

The typical computer user is faced with notifications and alerts generated from many 
different sources. For example, an operating system may notify the user that the system is 

10 running low on memory. An electronic mail program may notify the user that he or she has 

received new electronic mail. A calendaring program may notify the user that he or she has an 
upcoming appointment. A software application may infer that a user might benefit from some 
assistance. A electronic news or business service may be decide that a user might like to review 
some information about a development in the world. 

15 Generally, within the prior art, the user is made aware of each alert about different forms 

of information on an ad hoc basis, by the generating program. For example, the user may be in 
the middle of an important video conference taking place on the computer, yet the electronic 
mail program usually will dutifully alert the user to new email received - even if is junk mail, 
and even if the user would rather not receive such alerts because of the importance of the 

20 conference. While the user may or may not be able to change alert preferences in an individual 
program, he or she generally is not able to set preferences that affect all programs, system-wide, 
and furthermore many programs do not allow the changing of such preferences. Beyond the 
lack of an ability to centrally control alerts, there is a lack of methods that consider dynamically 
the urgency or importance of notifications and that can weigh the value of transmitting the 

25 information with the potential context-sensitive costs to the user in terms of the distraction, 
obstruction of limited screen real estate associated with the rendering of visual or audio 
notifications. Such costs can be dependent on the context, including the user's current location 
(office vs. offsite location for user's with mobile computing or paging devices), the current task, 
and current overall focus of attention. Methods have not been available for personal computing 

30 and communications systems that have the ability to intelligently balance the value of speedy 
transmittal of a notification (or the costs of delaying the notification of users) with the cost of 
notifying users. 

The situation of being faced with an intermittent stream of messages from multiple 
applications and messages is only likely to get worse, as the computer becomes a convergence 
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appliance, and other devices, such as telephones, pagers, televisions, appliances, etc., 
communicate through the computer. For example, a telephone may alert the user to an incoming 
call, including the phone number of the call, while a television may alert the user to a show that 
he or she had previously indicated was important to watch. Thus, the user potentially faces a 
5 situation where he or she is constantly distracted by such alerts. 

For these and other reasons, there is a need for the present invention. 



DISCLOSURE OF INVENTION 

The invention relates to an architecture for managing alerts. In one embodiment, a 

10 computerized system includes several modules and application interfaces, including an 
attentional-status module, a peripheral information notification and alerts module, and a 
notification decision-making module. The notification decision-making module in some 
embodiments can be further decomposed into a distinct rendering module. Such a system also 
provides in one embodiment a specific set of interfaces that allows multiple applications to 

15 publish their presence and functionality and subscribe to the architecture. 

The attentional-status module continues to infer the probabilities of alternative states of 
attention of the user based on the monitoring of events generated or influenced by the user's 
behavior and consideration of other important evidence, including the user's calendar and time 
of day. In another embodiment, the module simply generates the probability that the user is 

20 currently in a state where he or she is either actively interested in reviewing alerts or becomes 
"available" to receive a notification with zero or minimal cost. As shorthand, the probability of 
being available for reviewing alerts with minimal cost is also referred to as the user-availability 
probability. In one embodiment, in addition to the probability distribution over the focus of 
attention or over the availability of the user, the attentional status module also infers a 

25 probability distribution over the period of time until the user becomes available for reviewing 
alerts with minimal cost. In one embodiment, this module utilizes a probabilistic model such as 
a Bayesian network model to infer the probabilities of alternate states of attention, the 
availability probability, or the probability over the period of time until the user becomes 
available for reviewing alerts at minimal cost. 

30 The peripheral information notification and alerts module is to receive information, 

notifications, and alerts, for example, in one embodiment, from a set of application programs 
running on a computer, as well as from external devices such as telephones, televisions, etc. 
The notification decision-making module makes decisions about how, if, and when to alert the 
user about the information and alerts received by the peripheral information notification and 
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alerts module, based on the probabilities generated by the attentional status module about the 
likelihood of alternate states of attention. In one embodiment, the system employs a decision- 
theoretic analysis about how and when to render an alert based on a consideration of the 
expected costs of interrupting the user by considering the costs of interruption for each of the 
possible states of attentional focus and the likelihood of each of the states. In one embodiment, 
this module determines the manner by which the user is alerted - for example, in an audio or 
visual manner, or on a mobile device such as a cell phone or a pager. 

Embodiments of the invention provide for advantages over the prior art. A user, for 
example, is not confronted with different alerts made in different manners ad hoc by different 
sources (e.g., programs or devices). Rather, alert management is centralized and is guided by 
policies derived from knowledge about costs or preferences. Furthermore, in one embodiment, 
the expected value of transmitting an alert determines whether the user desires to be alerted, 
based on what the user is currently doing, for example, on the current sensed activity and his or 
her prior history of responding to alerts. The importance of the alerts also can determine 
whether the user is alerted. Finally, the notification decision-making module ensures that alerts 
are presented to the user in a consistent manner, regardless of the source of the alerts, and can 
decide in one embodiment the manner of the alert based on its importance - for example, a 
salient visual and audio alert in the case of an extremely important alert, and a pleasant, low 
volume audio-only alert in the case of a low-priority alert. 

Embodiments of the invention include computer-implemented methods, computer- 
readable media, mobile paging and communication systems, and, more generally, computerized 
systems of varying embodiments. Still other embodiments, advantages, and aspects of the 
invention will become apparent by reading the following detailed description, and by reference 
to the drawings. 

BRIEF DESCRIPTION OF DRAWINGS 

FIG. 1 is a diagram of an operating environment in conjunction with which embodiments 
of the invention may be practiced; 

FIG, 2 is a diagram of a system according to an embodiment of the invention; 

FIG. 3 is a diagram of the attentional status module of FIG. 2 in more detail, according to 
one embodiment of the invention; 

FIG. 4 is a diagram of a Bayesian model of a user's focus of attention, according to one 
embodiment of the invention; 
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FIG. 5 is a diagram of the peripheral information and notification alerts module of FIG. 2 
in more detail, according to one embodiment of the invention; 

FIG. 6 is a diagram of the notification decision-making module of FIG. 2 in more detail, 
according to one embodiment of the invention; and, 

FIG. 7 is a flowchart of a method according to an embodiment of the invention. 

MODE(S) FOR CARRYING OUT INVENTION 

In the following detailed description of exemplary embodiments of the invention, 
reference is made to the accompanying drawings, which form a part hereof, and in which is 
shown by way of illustration specific exemplary embodiments in which the invention may be 
practiced. These embodiments are described in sufficient detail to enable those skilled in the art 
to practice the invention, and it is to be understood that other embodiments may be utilized and 
that logical, mechanical, electrical, and other changes may be made without departing from the 
spirit or scope of the present invention. The following detailed description is, therefore, not to 
be taken in a limiting sense, and the scope of the present invention is defined only by the 
appended claims. 

Some portions of the detailed descriptions that follow are presented in terms of 
algorithms and symbolic representations of operations on data bits within a computer memory. 
These algorithmic descriptions and representations are the means used by those skilled in the 
data processing arts to most effectively convey the substance of their work to others skilled in 
the art. An algorithm is here, and generally, conceived to be a self-consistent sequence of steps 
leading to a desired result. The steps are those requiring physical manipulations of physical 
quantities. Usually, though not necessarily, these quantities take the form of electrical or 
magnetic signals capable of being stored, transferred, combined, compared, and otherwise 
manipulated. 

It has proven convenient at times, principally for reasons of common usage, to refer to 
these signals as bits, values, elements, symbols, characters, terms, numbers, or the like. It 
should be borne in mind, however, that all of these and similar terms are to be associated with 
the appropriate physical quantities and are merely convenient labels applied to these quantities. 
Unless specifically stated otherwise as apparent from the following discussions, it is appreciated 
that throughout the present invention, discussions utilizing terms such as processing or 
computing or calculating or determining or displaying or the like, refer to the action and 
processes of a computer system, or similar electronic computing device, that manipulates and 
transforms data represented as physical (electronic) quantities within the computer system's 
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registers and memories into other data similarly represented as physical quantities within the 
computer system memories or registers or other such information storage, transmission or 
display devices. 



5 Operating Environment 

Referring to FIG. 1, a diagram of the hardware and operating environment in conjunction 
with which embodiments of the invention may be practiced is shown. The description of FIG. 1 
is intended to provide a brief, general description of suitable computer hardware and a suitable 
computing environment in conjunction with which the invention may be implemented. 

10 Although not required, the invention is described in the general context of computer-executable 
instructions, such as program modules, being executed by a computer, such as a personal 
computer. Generally, program modules include routines, programs, objects, components, data 
structures, etc., that perform particular tasks or implement particular abstract data types. 

Moreover, those skilled in the art will appreciate that the invention may be practiced with 

15 other computer system configurations, including hand-held devices, multiprocessor systems, 
microprocessor-based or programmable consumer electronics, network PC's, minicomputers, 
mainframe computers, and the like. The invention may also be practiced in distributed 
computing environments where tasks are performed by remote processing devices that are linked 
through a communications network. In a distributed computing environment, program modules 

20 may be located in both local and remote memory storage devices. 

The exemplary hardware and operating environment of FIG. 1 for implementing the 
invention includes a general purpose computing device in the form of a computer 20, including a 
processing unit 21, a system memory 22, and a system bus 23 that operatively couples various 
system components include the system memory to the processing unit 21 . There may be only 

25 one or there may be more than one processing unit 21 , such that the processor of computer 20 
comprises a single central-processing unit (CPU), or a plurality of processing units, commonly 
referred to as a parallel processing environment. The computer 20 may be a conventional 
computer, a distributed computer, or any other type of computer; the invention is not so limited. 
The system bus 23 may be any of several types of bus structures including a memory bus 

30 or memory controller, a peripheral bus, and a local bus using any of a variety of bus 

architectures. The system memory may also be referred to as simply the memory, and includes 
read only memory (ROM) 24 and random access memory (RAM) 25 . A basic input/output 
system (BIOS) 26, containing the basic routines that help to transfer information between 
elements within the computer 20, such as during start-up, is stored in ROM 24. The computer 
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20 further includes a hard disk drive 27 for reading from and writing to a hard disk, not shown, a 
magnetic disk drive 28 for reading from or writing to a removable magnetic disk 29, and an 
optical disk drive 30 for reading from or writing to a removable optical disk 3 1 such as a CD 
ROM or other optical media. 
5 The hard disk drive 27, magnetic disk drive 28, and optical disk drive 30 are connected 

to the system bus 23 by a hard disk drive interface 32, a magnetic disk drive interface 33, and an 
optical disk drive interface 34, respectively. The drives and their associated computer-readable 
media provide nonvolatile storage of computer-readable instructions, data structures, program 
modules, and other data for the computer 20. It should be appreciated by those skilled in the art 

10 that any type of computer-readable media which can store data that is accessible by a computer, 
such as magnetic cassettes, flash memory cards, digital video disks, Bernoulli cartridges, 
random access memories (RAMs), read only memories (ROMs), and the like, may be used in 
the exemplary operating environment. 

A number of program modules may be stored on the hard disk, magnetic disk 29, optical 

15 disk 31, ROM 24, or RAM 25, including an operating system 35, one or more application 

programs 36, other program modules 37, and program data 38. A user may enter commands and 
information into the personal computer 20 through input devices such as a keyboard 40 and 
pointing device 42. Other input devices (not shown) may include a microphone, joystick, game 
pad, satellite dish, scanner, or the like. These and other input devices are often connected to the 

20 processing unit 21 through a serial port interface 46 that is coupled to the system bus, but may 
be connected by other interfaces, such as a parallel port, game port, or a universal serial bus 
(USB). A monitor 47 or other type of display device is also connected to the system bus 23 via 
an interface, such as a video adapter 48. In addition to the monitor, computers typically include 
other peripheral output devices (not shown), such as speakers and printers. 

25 The computer 20 may operate in a networked environment using logical connections to 

one or more remote computers, such as remote computer 49. These logical connections are 
achieved by a communication device coupled to or a part of the computer 20; the invention is 
not limited to a particular type of communications device. The remote computer 49 may be 
another computer, a server, a router, a network PC, a client, a peer device or other common 

30 network node, and typically includes many or all of the elements described above relative to the 
computer 20, although only a memory storage device 50 has been illustrated in FIG. 1 . The 
logical connections depicted in FIG. 1 include a local-area network (LAN) 5 1 and a wide-area 
network (WAN) 52. Such networking environments are commonplace in office networks, 
enterprise-wide computer networks, intranets and the Internal, which are all types of networks. 
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When used in a LAN-networking environment, the computer 20 is connected to the local 
network 51 through a network interface or adapter 53, which is one type of communications 
device. When used in a WAN-networking environment, the computer 20 typically includes a 
modem 54, a type of communications device, or any other type of communications device for 
5 establishing communications over the wide area network 52, such as the Internal. The modem 
54, which may be internal or external, is connected to the system bus 23 via the serial port 
interface 46. In a networked environment, program modules depicted relative to the personal 
computer 20, or portions thereof, may be stored in the remote memory storage device. It is 
appreciated that the network connections shown are exemplary and other means of and 
10 communications devices for establishing a communications link between the computers may be 
used. 



System 

In this section of the detailed description, description is provided of a system according 

15 to an embodiment of the invention. The description is made with reference to FIG. 2, which is a 
diagram of a system according to an embodiment of the invention. Referring now to FIG. 2, the 
system 200 includes three modules, a peripheral information notification and alerts module 202, 
an attentional status module 204, and a notifications decision-making module 206. Each of 
these modules can in one embodiment be implemented as a computer program executed by a 

20 processor of a computer, such as the computer described in the preceding section, from a 
computer-readable medium, such as a memory or a hard disk drive, of a computer. The 
invention is not so limited, however. 

Each of the modules 202, 204 and 206 is described first in general terms, and then more 
specifically. The attentional status module 204 generates one or more probabilities (for 

25 example, a probability distribution), which in one embodiment can be defined as the probability 
that the user is receptive to receiving an alert. For purposes of generality, the one or more 
probabilities generated by the module 240 may be referred to as a "probability" or the plural 
"probabilities"; however, it is understood that this is for shorthand purposes only, and that the 
application applies to either case — one probability, or many probabilities. In one embodiment, 

30 the module 204 utilizes a probabilistic model to generate a probability. The peripheral 
information notification and alerts module 202 receives alerts. For example, in one 
embodiment, the module 202 receives alerts from computer programs running on a computer, 
including application programs, operating systems, etc., as well as from external devices such as 
telephones, televisions, etc. The invention is not so limited. Both of these modules 202 and 204 
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are operatively and/or communicatively coupled to the notification decision-making module 
206. The notifications decision-making module (also referred to as the notifications 
management module) 206 alerts the user of the alerts received by the module 202, based on the 
inferred probabilities of different states of attention of the user generated by the module 204. In 
5 one embodiment, the module 206 determines the manner by which the user is alerted, such as in 
an audio and/or visual manner. 

Each of the modules 202, 204 and 206 is now described in more detailed. 



Attentional Status Module 

10 In this section of the detailed description, the attentional status module of the system is 

described in more detail, according to one embodiment of the invention. The description is 
made with reference to FIG. 3, which is a diagram of the attentional status module 204 shown in 
more detail, according to one embodiment of the invention, and FIG. 4, which is a diagram of a 
Bayesian model of a user's focus of attention, according to one embodiment of the invention. 

15 Referring first to FIG. 3, the attentional status module 204 ultimately generates a 

probability distribution over different states of attention 300. In one embodiment, the output of 
the attentional status module can be the single availability probability — the probability that the 
user is in a state that makes receipt of an alert or notification a low cost event, which as 
described is defined in one embodiment as the probability that the user is receptive to receiving 

20 an alert or is actively seeking the peripheral information associated with one or more alerts More 
generally, the probability 300 is defined as the probability distribution over a user's focus of 
attention. The invention is not particularly limited by the manner in which the probability 300 is 
generated. 

The probability 300 is generated in one embodiment by considering a profile of prior 
25 knowledge 302, as well as one or more contextual events 304. The profile 302 includes a user 
profile directly specified by the user or assessed from the user, or of knowledge that has been 
learned by observing user's responses to previous alerts, in one embodiment. That is, the profile 
302 in this embodiment includes how the user has responded previously to alerts made. If the 
user has been receptive to alerts in the past, for example, this may increase the probability 300, 
30 while if the user has not been receptive to alerts in the past, this may decrease the probability 
300. 

The contextual events 304 include computer information as well as external information. 
Operating system events 306 may include information such as whether the user has been 
focused on a single application and is typing quickly on the keyboard, which may indicate that 
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the user is busy. Other operating system events 306 include the speed and periodicity of 
movements of the mouse, various patterns of scrolling and dwelling on windows containing 
rendered text, and high-level patterns of transition among multiple application types. 
Application events 308 may include whether a user has been searching through menus that allow 
5 for access of different application functionalities, information about the kind of online help 
being reviewed by the user, and indications of the sequence of refinements being employed 
during a process of searching large corpora of documents. For example, if a user is in a 
spreadsheet program, and has been modifying the spreadsheet and/or entering data recently, then 
the user is generally busy in this application. Other computer information includes the user's 

10 schedule 310, which can be gleaned from a calendaring or appointment program. This 

information may indicate whether the user has a deadline looming in an hour, is having an 
important meeting, is traveling, or is in the middle of a conference, etc. 

External information includes the ambient acoustical energy in the room 312 and visual 
cues 314. The room acoustics 312 can indicate if there are other people in the room besides the 

15 user, suggesting that the user is busy talking to these other people. Information considered by 

the attentional-status module can include an analysis of in the room, including a consideration of 
such preprocessing stages as an analysis of the pattern of audio energy over time and a Fourier 
analysis of the frequency contour of the audio spectrum. The visual cues 314 can include both 
room-based visuals 316, as well as gaze 318. The room-based visuals 316 can be used to 

20 determine whether the user is even in the room with the computer, as well as whether the user is 
alone in the room or other people are present, too. The gaze 318 can be used to determine 
whether the user is attentive to the computer, or whether the user is looking at a book, has his or 
her head turned to one side, etc. Thus, the one or more contextual events include audio 
information as well as visual information. 

25 Thus, the contextual events 304 and/or the profile 302 are used to determine the 

probability distribution over a user's focus of attention, or of the single availability probability 
that a user is open to or actively seeking notifications. As has been stated, the invention is not 
limited to the manner by which this probability distribution over the user's focus of attention or 
a single availability probability over receptivity to alerts is generated. In one embodiment, 

30 however, a probabilistic model, such as a Bayesian network 320, as known within the art, is 
utilized. The use of a Bayesian network to generate a probability distribution over a user's 
focus of attention and the probability distribution over the period of time until the user becomes 
available for reviewing notifications at minimal cost. 



9 
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In general, it is noted that alerts provide information at a cost of interruption and 
obstruction of valuable screen real estate. Thus, it is assumed that the cost of interruption 
depends on a user's current focus of attention. A Bayesian network can therefore be used to 
infer a probability distribution over a user's focus of attention and task. In one embodiment, a 
5 set of mutually exclusive and exhaustive states of attention focus can be identified. 

Referring to FIG. 4, a diagram of a Bayesian model 400 of a user's focus of attention is 
shown. The states of the variable Focus of Attention refer to desktop and nondesktop contexts, 
as have been described. Attentional contexts considered include Situation awareness — catching 
up, Non-specific background tasks, Focused content generation or review, Light content 
10 generation or content review, Browsing documents, Meeting in office, Meeting out of office, 
Private time, Family, personal focus, Causal conversation, and Travel. 

An attentional status and location are influenced by the user's scheduled appointments, 
the proximity of deadlines, and the time of day. An attentional status and location influences 
potentially observable desktop activity and proximal conversation. Variables representing these 
15 observations are included in the Bayesian model 400, as shown in FIG. 4. Desktop evidence 
considered in the Bayesian model includes states that represent vari ous classes of mouse and 
keyboard activity and patterns of application usage (e.g., Email-centric, Word-processor centric, 
etc.). A Room acoustics variable represents a coarse analysis of audio in the user's office. In 
real-time use, information from an online calendar and time of day, as well as desktop activity 
20 and room acoustics are continuously monitored to provide updates to the probability distribution 
over the target variable, User Attentional Focus. 

Peripheral Information Notification and Alerts Module 

In this section of the detailed description, the peripheral information notification and 
25 alerts module is described in more detail, according to one embodiment of the invention. The 
description is made with reference to FIG. 5, which is a diagram of the peripheral information 
notification and alerts module 202 shown in more detail, according to one embodiment of the 
invention. 

Referring to FIG. 5, the peripheral information notification and alerts module 202 
30 receives desirably all generated alerts. That is, rather than a specific application program 

alerting the user in its own manner, the program instead passes along its alert to the module 202. 
In this manner, alerts management can then be conducted in a centralized fashion by a system 
according to an embodiment of the invention. In one embodiment the peripheral information 
notification an alerts module provides a set of standardized interfaces to applications, some of 
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which may be written as "plug-ins" explicitly to provide auxiliary information based on 
inference about an attentional status. 

The invention is not particularly limited by the sources of the alerts. However, common 
alerts include, in one embodiment, alerts generated by application program 500, computer 
5 networks 502 (including, for example, alerts received over such networks from other 

computers), and operating systems 504. Furthermore, in one embodiment, the alerts received by 
the module 202 also include alerts generated by external devices 506, such as telephones, 
televisions, appliances, etc. The invention is not so limited. 

In one embodiment, the module 202 passes along the alerts it receives through a queue 
10 508. The queue 508 may be of a predetermined depth to ensure that all alerts that can 

conceivably be generated within a particular length of time can be stored in the queue 508. The 
invention is not so limited, however. 



Notification Decision-Making Module 

15 In this section of the detailed description, the notification decision-making module is 

described in more detail, according to one embodiment of the invention. The description is 
made with reference to FIG. 6, which is a diagram of the notification decision-making module 
206 shown in more detail, according to one embodiment of the invention. 

Referring now to FIG. 6, the notification decision-making module 206 alerts the user of 

20 the alerts 600 received from the peripheral information notification and alerts module, based on 
the probability distribution over an attentional status or the availability probability 602 from the 
attentional status module, as represented by 604. The module 206, more specifically, determines 
the "how" and "when" of user alerting - that is, the manner by which the user should be alerted, 
for example, in a visual and/or an audio manner, and when the user should be alerted. In making 

25 this determination, the module 206 desirably utilizes a determination of available resources 606, 
as well as a history of previous alerts 608. The available resources 606 indicates whether the 
user has a sound card on his or her computer, for example, by which to render audible audio 
alerts; the type of display on the computer and available screen real estate thereon, for example, 
which can be used to indicate whether the user has open screen space for a visual alert; etc.; the 

30 invention is not so limited. The previous alerts history 608 indicates the types of alerts that have 
been made to the user in the past, as well as the frequency of the alerts - such that the user is not 
overwhelmed by additional alerts, if many recent alerts have been made, for example. 

The invention is not particularly limited to the manner by which the module 206 
determines how and when an alert should be made to the user. In one embodiment, how an alert 

11 
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should be made is dependent on user preference as to the underlying information of an alert (for 
example, electronic mail, versus a telephone alert, etc.), and desirably on the priority of the alert. 
Each manner of how an alert is made in one embodiment has an associated cost of distraction, 
which further assists in determining when or whether an alert should be made. The invention is 
not particularly limited as to the manner by which alerts can be made; as has been described, in 
one embodiment, the alerts can be made in an audio and/or a visual manner. 

In one embodiment, the determination as to when or whether an alert is provided to the 
user is made by inferring the expected cost of transmitting an alert to the user, and by inferring 
the informational benefits of the alerts. In other words, the utility of relaying information 
contained in an alert determines whether or when an alert should be made, where the utility is 
the difference between the expected costs and benefits of the information provided by the alert. 
This is now described in more detailed, with specific reference to the case involving email 
messages and alerts thereof, although those of ordinary skill within the art can appreciate that the 
invention is not so limited. 

In the general case, there are different dimensions of cost associated with alerts. Alerts 
can take the form of audio, visual or a combination of audio and visual notifications. Beyond 
the cognitive cost of the immediate distraction associated with an alert, visual alerts can obstruct 
content already at the center of an attentional status. Thus, it is useful to decompose the cost of 
an alert into the cognitive cost associated with an interrupt and the cost of obstruction of 
important display real estate. The latter dimension of cost can depend on the details of the 
design of the visual alert, as well as the status of displayed information associated with the main 
task. For example, a design that overlays a graphical alert over content at the center of a 
attentional status and that requires a user to take action to remove the display alert is more costly 
than an alert that appears and disappears autonomously in a timely and elegant manner. In one 
embodiment, the cost of interruption and the cost of obstruction are merged into a single cost, 
however. (It is noted that the terms document and text are used interchangeably herein and 
should be construed as interchangeable as well.) 

First, a set of alerting outcomes A h Fj, is considered, which represents the situation where 
alert A t occurs when a user is in the state of attentional focus Fj. To assess the cost for each 
alerting outcome, a cost function of the form C(Aj,Fj) is used, which refers to the cost of being 
alerted via action A, when the user is in attentional state Fj. Given uncertainty about a user's 
state of attention, the expected cost of alerting (ECA) a user with action A t is, 

ECA^ C "( A ^ F M F j \ E ") 
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where E° is evidence relevant to inferring an attentional status focus, such that p(F j \E a ) is 
determined by the attentional status module, as has been described, for example, using a 
Bayesian network. 

Next, the cost of delayed action under uncertainty is considered. This description is 
5 specifically made with reference to email messages having an assigned priority, although those 
of ordinary skill within the art can appreciate that the invention itself is not so limited. For 
example, such email messages may be received by the peripheral information notification and 
alerts module, where the messages have a priority over a predetermined threshold. A description 
of how priority is assigned to email messages in one manner, by assignment of email messages 
10 to particular criticality classes, is provided in a further section of the detailed description. 

In general, the priority of a message can be defined as the expected cost of delayed 
action associated with reading the message, or ECDA. ECDA is the difference in the expected 
value of taking immediate ideal action (action at time t 0 ) and delaying the ideal action until some 
future time /. Given a probability distribution over time criticality, p(H\E), the expected cost of 
15 delayed action for messages can be determined as, 
ECDA = 

maxZ"(AM j,t 0 )p(H j \E) - 
max2>(4,*V)P(tf,|£) 

A j 

ECDA thus provides a starting point for reasoning about the cost of delayed review of messages. 
The utility of reading an email message typically diminishes with delay in reviewing the 
message. Costs of delayed review of messages can also be significant with communications 

20 about coordination, for example, of meetings and deadlines. Thus, the cost of delayed review of 
messages can be represented by loss functions that operate on the amount of time remaining 
until the meeting being communicated about occurs. After a meeting has passed, many options 
for action are eliminated. Therefore, losses incurred with delays in the review of the message 
may be smaller for periods of delay coming after the occurrence of a meeting at the core of an 

25 email message. 

In one embodiment, ECDA is adapted to the problem of ideal alerting about email 
messages by considering the probability that a mail message is a member of one of several 
criticality classes. This avoids assigning specific priorities to email messages by bypassing 
explicit consideration and representation of actions. In one embodiment, each criticality class is 

30 assumed to be associated with a time-dependent cost function, described as a constant rate at 
which losses accrue with delayed review of a message. In the general case, however, the costs 
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of delayed review for each criticality case can be a nonlinear function of the time describing 
delays in reviewing messages. t Q is referred to as the moment the email arrives, and the expected 
cost for delays in review is determined until time t. 

Thus, assuming that each email message is in one of n criticality classes, it can also be 
5 assumed that each class is associated with a criticality-class - a specific constant rate of loss that 
describes the cost of delayed review. Thus, using C 1 to represent a time-dependent rate of loss, 
an expected cost of delayed review (ECDR) is computed for messages, 
ECDR = £C* - t 0 )p(H t | E") 

where to represents the time a message arrives, / is the time the message is reviewed, and is 
10 the evidence used to infer a probability distribution over the criticality class of a new incoming 
email message. The probability distribution would thus be obtained from the attentional status 
module in one embodiment of the invention. The constant rate of loss associated with the 
delayed review of messages is referred to as the expected criticality (EC) of a message, 
£C = £C(77,)/>(/7,|£<) 

15 Now, ideal alerting about communicated information is described. It is noted that users 

typically review email periodically even when using systems that are configured to suppress the 
active emission of alerts about incoming email. Therefore, the time between periods of 
reviewing new email in the absence of explicit alerts, which is the time until the user becomes 
"available" for reviewing the information, is referred to as the inspection interval, or /. The 

20 inspection interval is influenced by multiple factors, including the location of a user and the 
user's focus of attention. A Bayesian network, as known in the art, can be used to infer a 
probability distribution over the inspection interval based on influencing variables. For 
example, the variable Inspection Interval can be influenced by the variables User Attentional 
Focus and Deadline Status, as is shown in the previously described diagram of FIG. 4. 

25 The expected cost loss associated with reviewing email in an alert-free setting, given a 

probability distribution over the inspection interval, is 

ECDR' = 2>(/,)'(//_, +I j -tSZ J C d (H i )p{H i | E d ) 

j i 

where tj-j is the time of last access, t 0 is the time a message has arrived, and Ij is the inspection 
interval. 

30 The expected value of transmitting g an alert (EVTA) about a message at the present 

moment t before a user reviews the email, also referred to as the expected value of transmitting 
an alert, is the increase in the expected utility with being informed about the message at t versus 
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at the time it is expected that the user will access the mail in the absence of an alert about the 
message. Thus, 

EVTA^PVjX'f-, +Ij-t 0 )%C\H i )p{H i \E d )-Y J {t-t Q )C d {H i )p{H i \E d ) 

A system according to one embodiment of the invention, therefore, relays information about a 
message - that is, informs the user of an alert - when the net value of the alert (NEVA) is 
positive. This is the case when the EVTA dominates the current cost of distribution for the type 
of alert under consideration, 

NEVA — EVTA - ECA. 
In one specific embodiment of the invention, information from several messages are 
grouped together into a single compound alert, which can raise the value of the content revealed 
under the guise of a single, but potentially more complex, distraction. Reviewing information 
about multiple messages in an alert can be more costly than an alert relaying information about a 
single message. Such increases in distraction can be represented by making the cost of an alert a 
function of its informational complexity. It is assumed that the EVTA of an email message is 
independent of the EVTA of the other email messages. EVTA(M„0 is used to refer to the value 
of alerting a user about a single message M t at time / and ECA(rc) is used to refer to the expected 
cost of relaying the content of n messages. Thus, multiple messages can be considered by 
summing together the expected value of relaying information about a set of n messages, 

EVTA = Y j EVA(M i , 0 - ECA(n) . 
i=i 

It is noted that assuming independent in the value of reading distinct messages may, however, 
lead to over estimations of the value of the multiple-message alert because strings of messages 
received in sequence may refer to related content. 

Therefore, given inferred probability distributions over an attentional status focus and 
inspection interval, an assessment of the costs of distracting a user with alerts and the time 
criticality of incoming messages, NEVA can be employed to continue to reason about the costs 
versus the benefits of alerting users with summarizing information about the content of newly 
arriving email messages. 

In another embodiment of the invention, transmission costs are also included in NEVA, 
such that the equation is changed from 

NEVA = EVTA - ECA 

to 
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NEVA = EVTA - ECA - TC 
where TC is the transmission cost associated with the alert (e.g., the cost of the page or the cell 
phone cost). The influence of calendar events on ECA for the case of a computer relaying a 
message to a cell phone is quite salient. That is, the online calendar can give the system an idea 
5 for how bad an interruption would be via a mobile device such as a cell phone or a pager — that 
is how big the ECA would be per the importance of the current meeting that the user is attending 
~ and perhaps wait until the ECA goes down, e.g., when the meeting ends. Also, the system in 
one embodiment checks to see if the user is around or not at the desktop system before making a 
decision that the only way to reach the user is to render the notification via the cell phone. 

10 

Assigning Messages to Criticalitv Classes 

As has been described in the preceding section, in one embodiment of the invention, the 
system determines when to provide an alert to a user based on the priority of the underlying 
information - for example, the underlying priority of an email message. As has also been 
15 described, in one embodiment, an email message alert arrives at the peripheral information 

notification and alerts module with an already assigned priority. However, a message may also 
be assigned a criticality class, as has been described. Therefore, in this section of the detailed 
description, a summary of how a message may be assigned a criticality class according to one 
manner is described. 

20 An email criticality classification can be based on text classification methods, as known 

within the art. The text classification methodology may employ different phases of analysis, 
including feature selection, classifier construction, and mapping classifier outputs to measures of 
beliefs that an email message is a member of each criticality class. In one embodiment, the text 
classification methodology is based on a Bayesian learning approach, as described in the 

25 reference M. Sahami, S. Dumais, D. Heckerman, E. Horvitz, A Bayesian Approach to Junk E- 
Mail Filtering, AAAI Workshop on Text Classification, July 1998, Madison, Wisconsin, AAAI 
Technical Report WS-98-05, which is hereby incorporated by reference. In other embodiments, 
the text classification methodology is based on a linear Support Vector machine methodology, 
as described in the following references: the coassigned patent, U.S. Pat. No. 5,864,848, issued 

30 January 26, 1999, which is hereby incorporated by reference; the previously filed and 

coassigned case entitled "METHODS AND APPARATUS FOR BUILDING A SUPPORT 
VECTOR MACHINE CLASSIFIER," serial no. 09/055,477, filed on April 6, 1998, which is 
also hereby incorporated by reference; and, the reference J. Piatt, Fast Training of Support 
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Vector Machines using Sequential Minimal Optimization, MIT Press, Baltimore, MD, 1998, 
which is also hereby incorporated by reference. 

Support Vector Machines build classifiers by identifying a hyperplane that separates a 
set of positive and negative examples with a maximum margin. In the linear form of SVM that 
5 is employed in one embodiment, the margin is defined by the distance of the hyperplane to the 
nearest positive and negative cases for each class. Maximizing the margin can be express as an 
optimization problem and search and optimization thus lay at the core of different SVM-based 
training methods. A post-processing procedure described in the Piatt reference is used that 
employs regularized maximum likelihood fitting to produce estimations of posterior 
10 probabilities. The method fits a sigmoid to the score that is output by the SVM classifier. 

A set of criticality classes is created, and a time-dependent cost function is assessed for 
each class. A training set for analysis by the SVM is built by the classifier-construction 
procedure by manually partitioning a corpus of sample messages into the different criticality 
classes. Given a training corpus, the text classification methods first apply feature-selection 
15 procedures that attempt to find the most discriminatory features. This process employs a 
mutual-information analysis. Feature selection can operate on single words or higher-level 
distinctions made available, such as phrases and parts of speech tagged with natural language 
processing. 

Feature selection for text classification typically performs a search over single words. 

20 Beyond the reliance on single words, domain-specific phrases and high-level patterns of features 
are also made available. Special tokens can also enhance classification. The quality of the 
learned classifiers for email criticality can be enhanced by inputting to the feature selection 
procedures handcrafted features that are identified as being useful for distinguishing among 
email of different time criticality. Thus, during feature selection, single words as well as special 

25 phrases and symbols that are useful for discriminating among messages of different levels of 
time criticality are considered. 

Tokens and patterns of value in identifying the criticality of messages include such 
distinctions as: 

• Sender: single person versus an email alias, people at a user's organization, 
30 organizational relationship to user, names included on a user constructed list, 

people user has replied to 



Recipients: sent only to user, sent to a small number of people, sent to a 
mailing list 
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• Time criticality: inferred time of an implied meeting, language indicating cost 
with delay, including such phrases as "happening soon," right away," as soon 
as possible," "need this soon," "right away," "deadline is," by time, date," etc. 

• Past tense: phrases used to refer to events that have occurred in the past such 
5 as, "we met," "meeting went," "took care of," "meeting yesterday," etc. 

• Future tense: phrases used to refer to events that will occur in the future 
including "this week," "Are you going to," "when are you," etc. 

• Coordination: language used to refer to coordinative tasks such as "get 
together," "can we meet," "coordinate with," etc. 

10 • Personal requests: phrases associated with direct requests for assistance, 

including sentences ending with questions marks, "will you," "are you," "can 
you," "I need," "take care of," need to know," etc. 

• Importance: language and symbols referring to importance including the 
presence of an explicit high or low priority flag, and such phrases as "is 

15 important," is critical," etc. 

• Length of message: size of new component of a message (excluding 
forwards) 

• Presence of attachments: noting the inclusion of documents in the email 

• Time of day: the time a message was composed 

20 • Signs of junk email: patterns such as percent nonalphanumeric characters, and 

pornographic content, marketing phraseology such as "Free!!," "Only $," 
"Limited offer," etc. 

In addition, an embodiment allows for the creation of features as Boolean combinations 
of features such as these, including, for example, endowing the system with the ability to 
25 identify the feature defined as a short note, containing at least one question, from an individual 
one or more links above the user in the org chart, or a message sent directly to me involving one 
or more phrases referring to time criticality from some close to me in the org chart, etc. 
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Method 

In this section of the detailed description, a computer-implemented method according to 
an embodiment of the invention is described. The method may be performed, for example, by a 
system according to an embodiment of the invention, as has already been described. The 
5 computer-implemented method is desirably realized at least in part as one or more programs 
running on a computer — that is, as a program executed from a computer-readable medium such 
as a memory by a processor of a computer. The program is desirably storable on a machine- 
readable medium such as a floppy disk or a CD-ROM, for distribution and installation and 
execution on another computer. 

10 Referring to FIG. 7, a flowchart of a method according to an embodiment of the 

invention is shown. In 700, alerts are received, for example, by a peripheral information 
notification and alerts module as has been described. The alerts may be from application 
programs, operating systems, networks, external devices, etc.; the invention is not so limited. In 
702, a probability is generated, for example, by an attentional status module as has been 

15 described. The probability may be a probability distribution in one embodiment. The 

generation is based in one embodiment on a profile of prior knowledge, and contextual events; 
the invention is not so limited. Finally, in 704, the user is alerted of one or more of the alerts 
received in 700, based on at least the probability determined in 702 - for example, by an 
notification decision-making module as has been described. In one embodiment, 702 include 

20 determining how and when a specific alert is to be made to the user. 

Conclusion 

Although specific embodiments have been illustrated and described herein, it will be 
appreciated by those of ordinary skill in the art that any arrangement that is calculated to achieve 
25 the same purpose may be substituted for the specific embodiments shown. This application is 
intended to cover any adaptations or variations of the present invention. Therefore, it is 
manifestly intended that this invention be limited only by the following claims and equivalents 
thereof. 
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We claim: 

1 . A computerized system (200) characterized by: 

an attentional status module (204) to generate one or more probabilities about a focus of 
attention of a user; 

5 a peripheral information notification and alerts module (202) to receive alerts; and, 

a notification decision-making module (206) to alert the user of the alerts based on the 
probabilities about the focus of attention of the user. 

2. The system of claim 1 , wherein the one or more probabilities are characterized by a 
probability distribution. 

10 3. The system of claim 1 , wherein the one or more probabilities are characterized by a 

probability distribution over a set of states corresponding to a mutually exclusive and exhaustive 
set of foci of attention of the user. 

4. The system of claim 1 , wherein the attentional status module (204) provides a single 
availability probability representing a likelihood that the user can receive the alerts at less than a 

15 minimal cost. 

5. The system of claim 1 , wherein the attentional status module (204) generates and an 
estimation of a period of time until attentional status of the user will become available to receive 
the alerts at less than a minimal cost. 

6. The system of claim 1 , wherein the attentional status module (204) provides one or more 
20 probabilities about the focus of attention of the user and an estimation of the period of time until 

the user will seek to actively review the alerts without prompting. 

7. The system of claim 1, wherein the attentional status module (204) is to generate the one 
or more probabilities based on at least one of: one or more contextual events, and a user profile. 

8. The system of claim 1, wherein the attentional status module (204) is to generate the one 
25 or more probabilities by utilizing a probabilistic model. 

20 
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9. The system of claim 1, wherein the attentional status module (204) is to generate the one 
or more probabilities based on a Bayesian network. 



10. The system of claim 1, wherein the peripheral information notification and alerts module 
(202) is to receive the alerts from at least one of: one or more applications, one or more 

5 networks, and one or more operating systems. 

11. The system of claim 1, wherein the peripheral information notification and alerts module 
(202) is to receive the alerts from one or more external devices. 

12. The system of claim 1, wherein the notification decision-making module (206) is to alert 
the user of the alerts further based on a history of previous alerts. 

10 13. The system of claim 1, wherein the notification decision-making module (206) is to alert 
the user of the alerts further based on available system resources. 

14. The system of claim 1, wherein the notification decision-making module (206) is to alert 
the user of the alerts in a visual manner. 

15. The system of claim 1, wherein the notification decision-making module (206) is to alert 
15 the user of the alerts in an audio manner. 

16. The system of claim 1, wherein the notification decision-making module (206) is to alert 
the user of the alerts on a mobile device. 

17. A computer-implemented method characterized by: 

receiving an alert (700) from at least one of: one or more applications, one or more 
20 networks, one or more operating systems, and one or more external devices; 

generating one or more probabilities (702) about a focus of attention of a user using a 
probabilistic model based on at least one of: one or more contextual events, and a user profile; 
and, 

alerting the user (704) based on the one or more probabilities. 
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18. The method of claim 17, wherein alerting the user (704) is characterized by alerting the 
user in at least one of: an audio manner and a visual manner. 



19. The method of claim 17, wherein generating the one or more probabilities (702) is based 
on a maximum-utility decision-theoretic model. 

5 20. The method of claim 17, wherein generating the one or more probabilities (702) is based 
on a Bayesian network. 
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